bugfix: require exactly one state in sys_safety

and remove mutex when processing initial states, because mutex is ignored at the initial time if ignore_ts_initial is True.

Also: do not ignore initial state defined using an FTS in robot_discrete.py